Stylemix Masterstudy Lms vulnerabilities

• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability CVE-2026-119478 4.3 MediumNovember 7, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability CVE-2026-118090 8.8 HighOctober 30, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerability CVE-2026-118092 4.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax CVE-2026-80069 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms wordpress plugin MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter CVE-2026-80067 5.3 MediumOctober 29, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability CVE-2026-105079 6.5 MediumOctober 8, 2026
• stylemix masterstudy lms MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass CVE-2026-88848 4.2 MediumSeptember 25, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability CVE-2026-78284 8.6 HighAugust 24, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability CVE-2026-73404 6.5 MediumAugust 18, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability CVE-2026-68568 6.3 MediumAugust 18, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability CVE-2026-28145 5.3 MediumJuly 31, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.14 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Attachment Deletion CVE-2026-5060 6.5 MediumJuly 29, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability CVE-2026-57330 6.5 MediumJune 29, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability CVE-2026-57640 4.3 MediumJune 26, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability CVE-2026-40766 8.5 HighJune 15, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.7.29 - SQL Injection vulnerability CVE-2026-42730 8.5 HighMay 27, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters CVE-2026-4817 6.5 MediumApril 17, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode CVE-2026-0559 6.4 MediumFebruary 14, 2026
• stylemix masterstudy lms wordpress plugin – for online courses and education MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion CVE-2025-13766 5.4 MediumJanuary 6, 2026
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injection vulnerability CVE-2025-64366 7.6 HighOctober 31, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive Data Exposure vulnerability CVE-2025-59575 4.9 MediumOctober 22, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS Plugin <= 3.6.20 - Broken Access Control Vulnerability CVE-2025-59576 6.5 MediumSeptember 22, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability CVE-2025-59577 4.3 MediumSeptember 22, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability CVE-2025-54744 6.5 MediumSeptember 5, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability CVE-2025-32237 4.3 MediumApril 4, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability CVE-2025-32141 8.8 HighApril 4, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37093 4.3 MediumJanuary 2, 2025
• stylemix masterstudy lms WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability CVE-2024-37094 8.2 HighNovember 1, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.3.8 - Missing Authorization CVE-2024-3942 6.3 MediumMay 2, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template CVE-2024-3136 9.8 CriticalApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts CVE-2024-1904 4.3 MediumApril 9, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal CVE-2024-2411 9.8 CriticalMarch 29, 2024
• stylemixthemes masterstudy lms, stylemix masterstudy lms wordpress plugin – for online courses and education +1 more MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action CVE-2024-2409 9.8 CriticalMarch 29, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route CVE-2024-2106 5.3 MediumMarch 13, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVE-2024-1512 Public exploit EPSS 77.7% 9.8 CriticalFebruary 17, 2024
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Broken Access Control CVE-2023-35093 6.5 MediumJune 22, 2023
• stylemix masterstudy lms wordpress plugin – for online courses and education, stylemixthemes masterstudy lms +1 more WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-35090 6.5 MediumJune 22, 2023